https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:45:11.045647+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-190230 EUVD-2026-190230 2026-10-12T22:45:11.049181+00:00 EUVD-2026-190230 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40535 fkie_cve-2023-40535 2026-10-12T22:45:11.049218+00:00

Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/ghsa-4hfp-q9wp-2m98 GHSA-4hfp-q9wp-2m98 2026-10-12T22:45:11.049282+00:00

Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/gsd-2023-40535 gsd-2023-40535 2026-10-12T22:45:11.049306+00:00 gsd-2023-40535 https://cve.radiocsirt.org/vuln/jvndb-2023-000089 jvndb-2023-000089 2026-10-12T22:45:11.049319+00:00

VI Web Client provided by i-PRO Co., Ltd. is Video Insight's video management software. VI Web Client contains multiple vulnerabilities listed below.<ul><li>Open Redirect (CWE-601) - CVE-2023-38574</li><li>Reflected Cross-site Scripting (CWE-79) - CVE-2023-39938</li><li>View Stored Cross-site Scripting in View setting page (CWE-79) - CVE-2023-40535</li><li>Stored Cross-site Scripting in Map setting page (CWE-79) - CVE-2023-40705</li></ul>Michael Heinzl reported these vulnerabilities to i-PRO Co., Ltd. and coordinated with them. After the coordination was completed, the developer reported this case to IPA to notify users of the solution through JVN. JPCERT/CC coordinated with the developer for the publication.